When a keyword is embedded within a PowerPoint Master Slide, Symantec DLP is not detecting it.
A bug for not triggering an incident when the keywords are within the Master Slide of a Power Point representation is filed under
In Symantec DLP prior to version 12.0 there is no workaround to trigger on the keywords within the Master slide.
Symantec DLP 12.0 onward, data within Master Templates will trigger incidents when Slide Master is more than one page. Alternative workaround to capture Slide Master data on single PPT page is to modify formats.ini
formats.ini is on Detection servers and is located In \SymantecDLP\Protect\plugins\contentextraction\Verity\x64 Add the following to formats.ini:
Keep the remaining options the same. Then save the file and restart the Vontu Monitor service.
Imported Document ID: TECH221913
Subscribing will provide email updates when this Article is updated. Login is required.